Privacy Policy

These notices pursuant to Art. 13 et seq. DSGVO on data protection serve the duty to inform you when we collect personal data on our website.

Name and contact details of the controller

Holzhofer Consulting GmbH
Lochhamer Straße 31
82152 Munich - Planegg
Germany
Tel.: +49 (0) 89 12 50 15 600
E-Mail:

(hereinafter "Holzhofer Consulting GmbH", "we", "us").

1. Purposes for which the personal data are to be processed, and the legal basis for the processing

1.1 Processing of access data

For technical reasons, we process a limited amount of data (so-called connection data) every time you access our website. This data is technically necessary to establish and maintain a connection between your device and our servers. This data is processed in the web server's main memory for the duration of the connection:

The following data or data categories are collected:

IP address
Source port of the requesting device or a gateway (e.g. firewall or proxy)
Timestamp (date and time) of the request
Amount of data transferred
Notification of whether the request was successful (via HTTP error code)
Notification of why a request may have failed (via HTTP error code)
Referrer (website from which our main page or subpages were accessed)
User agent (browser type used to access our website, including version)
Width and height of the display screen
Your browser's language settings

The IP address, timestamp, HTTP error code, referrer and user agent are automatically logged when our websites are accessed, in order to ensure the functionality and protection of our websites. The logs also serve to optimize the website. Your IP address is further processed in the logs only in shortened form and is thereby anonymized. It is not possible for us to create user profiles or identify individuals from this data.

Processing takes place on the basis of legitimate interest pursuant to Art. 6(1)(f) DSGVO. A balancing of interests was carried out and concluded that the processing is necessary to safeguard our legitimate interests and that these outweigh your interests, fundamental rights and freedoms that require the protection of personal data.

1.2 Data processing for pre-contractual measures with prospects

Our offer is aimed exclusively at entrepreneurs, tradespeople, freelancers and public institutions. We do not enter into contracts with consumers within the meaning of § 13 BGB.

If you are interested in the services offered on our website, we process and store your details when you contact us. All information on fulfilling the disclosure obligations for this processing pursuant to Art. 13 et seq. DSGVO can be found in our privacy notice for our customers and prospects.

1.3 Data processing for reach measurement

We process personal data of visitors to our website in order to improve its quality and content. Usage is analyzed using the Matomo tool, which we host ourselves. For this purpose, your IP address is further processed only in shortened form and is thereby anonymized. It is therefore not possible to draw conclusions about a specific person. This processing of personal data regularly takes place on the basis of Art. 6(1)(f) DSGVO. A balancing of interests was carried out and concluded that the interests of data subjects, among other things due to the technical and organizational measures taken, do not outweigh the interest in improving the quality and content of the website.

If you do not want processing for analysis purposes, you can object or withdraw your objection at any time by clicking the following button:

In this case, an opt-out cookie will be set in your browser that prevents the collection of usage data. Please note that this setting only applies within your browser and only works if cookies can be set. If you use a different browser, an opt-out cookie must also be set here to prevent the collection of usage data. If all cookies in the browser are deleted, the opt-out cookie must also be set again in this case.

1.4 Technically necessary cookies as well as advertising and marketing cookies (tracking cookies)

No cookies are set while using our website, neither technically necessary ones nor those that, for example, record user behavior (analysis and tracking cookies).

Related technologies, such as tracking scripts, are also not used. The exception is the opt-out cookie, if you object to the processing of data for analysis purposes under item 1.3.

1.5 Processing in connection with our contact form

When you contact us via the contact form at https://www.holzhofer-consulting.de/kontakt/, the information you provide is generally stored only for the purpose of processing and responding to your inquiry as well as for possible follow-up inquiries.

The following data or data categories are collected and processed:

The legal basis for processing your data is our legitimate interest pursuant to Art. 6(1)(f) DSGVO. A balancing of interests was carried out and concluded that the interests of data subjects do not outweigh our interest in responding to your inquiry.

2. Automated decision-making, including profiling

Holzhofer Consulting GmbH does not carry out automated decision-making in individual cases, including profiling, pursuant to Art. 22(1) and (4) DSGVO.

3. Data transfer to a third country

Data transfers to countries outside the EU and the European Economic Area ("third countries") arise in connection with the administration, development and operation of IT systems. Transfers only take place on the basis of:

an adequacy decision of the European Commission within the meaning of Art. 45 DSGVO.
an approved certification mechanism pursuant to Art. 42 DSGVO together with legally binding and enforceable commitments of the controller or processor in the third country.
standard data protection clauses adopted by the Commission pursuant to the examination procedure under Art. 93(2) DSGVO.

Currently, there is no data transfer to countries outside the EU and the European Economic Area ("third countries") when using our website. The websites and logs are located exclusively on servers in Germany.

4. Recipients of your data

The hosting of this website is carried out by processors within the meaning of Art. 28 DSGVO, who are recipients pursuant to Art. 4(1) no. 9 DSGVO.

5. Storage period and criteria for determining the period

Personal data is generally only stored for as long as is necessary to fulfil the purposes named here, or as provided for by the retention periods stipulated by law. Once the respective purpose no longer applies, or after the retention periods have expired, the data is deleted in accordance with statutory provisions.

In this case, all connection data is automatically deleted from the web server's memory shortly after the connection ends. The anonymized access logs are retained for 30 days. If parts of the access logs are needed for evidentiary purposes, they are excluded from deletion until the respective incident has been conclusively clarified.

6. Information on your rights as a data subject

Holzhofer Consulting GmbH, Lochhamer Str. 31, 82152 Munich - Planegg, Germany, is responsible for the processing of your data, unless stated otherwise.

You may at any time request information from us (Art. 15 DSGVO) about the data stored about you and its rectification (Art. 16 DSGVO) in the event of errors. Furthermore, you may request restriction of processing (Art. 18 DSGVO), the portability (Art. 20 DSGVO) of the data you have provided to us in a machine-readable format, or the deletion of your data (Art. 17 DSGVO) – insofar as it is no longer required.

You also have the right at any time to object to the use of your data that is based on public or legitimate interests (Art. 21 DSGVO).

If you wish to exercise your rights as a data subject, please direct your request to:

Holzhofer Consulting GmbH
Lochhamer Straße 31
82152 Munich - Planegg
Germany

7. Right to lodge a complaint with a supervisory authority

In addition, pursuant to Art. 77(1) DSGVO you have the right to lodge a complaint with a supervisory authority. Further information is available from the supervisory authority responsible for your location. For Holzhofer Consulting, this is the

Bavarian State Office for Data Protection Supervision
P.O. Box 1349
91511 Ansbach
Germany
Phone: +49 (0) 981 53 1300
E-Mail: poststelle@lda.bayern.de

These notices pursuant to Art. 13 et seq. DSGVO on data protection serve the duty to inform you regarding the processing of personal data of our customers and prospects interested in our services.

Our offer is aimed exclusively at entrepreneurs, tradespeople, freelancers and public institutions. We do not enter into contracts with consumers within the meaning of § 13 BGB.

Name and contact details of the controller

Holzhofer Consulting GmbH
Lochhamer Straße 31
82152 Munich - Planegg
Germany
Tel.: +49 (0) 89 12 50 15 600
E-Mail:

(hereinafter "Holzhofer Consulting GmbH", "we", "us").

1 Purposes for which personal data are to be processed and the legal bases for the processing

1.1 Handling inquiries and preparing quotes

If you are interested in the services we offer, when you contact us (e.g. by e-mail or telephone) we process and store the following information to handle your inquiry and prepare a quote:

Name
Position in the company
Business address
Business phone numbers
Business e-mail address

We reserve the right to ask about your decision by phone or e-mail within 60 days of submitting our quote, unless you have objected to such follow-up.

A balancing of interests was carried out and concluded that processing your data is necessary to respond to your inquiry and that our interest outweighs your interests or fundamental rights and freedoms regarding the protection of your data.

1.2 Performance and execution of consulting agreements

To advise our customers, we process the following categories of personal data:

Contact details of contact persons
Information on consulting activities as proof of service

For our consulting services we also use the respective customer's online video conferencing systems or, alternatively, our own system. Activation of the video transmission is at the discretion of the respective participant and is not associated with any advantages or disadvantages regarding the consulting service. As a rule, we do not record the video conferences. Should we exceptionally need to make a recording, we obtain consent declarations from the participants pursuant to Art. 6(1)(a) in conjunction with Art. 7 DSGVO.

For invoicing, monitoring and collecting receivables from deliveries and services, we process the contact details of accounting contacts and other persons entrusted with these processing activities.

If we are involved in handling security incidents or incidents involving a breach of the protection of personal data, we process the data analyzed in these cases and, where applicable, data that must be reported to the authorities. This may include e-mail addresses, entries from IT system log files, e-mail correspondence and information on the actions relevant to the incident.

A balancing of interests was carried out and concluded that the interests of data subjects do not outweigh our interests in the performance and execution of the consulting agreement. We have a legitimate interest in performing and executing our contractual obligations with our customers, for which the processing of the data and data categories named here is necessary.

1.3 Provision and operation of web-based trainings

As a user of our web-based training, you will find the privacy notice on our e-learning portal.

2. Automated decision-making, including profiling

Holzhofer Consulting GmbH does not carry out automated decision-making in individual cases, including profiling, pursuant to Art. 22(1) and (4) DSGVO.

3. Data transfer to a third country

Data transfers to countries outside the EU and the European Economic Area ("third countries") arise in connection with the administration, development and operation of IT systems. Transfers only take place on the basis of:

an adequacy decision of the European Commission within the meaning of Art. 45 DSGVO.
an approved certification mechanism pursuant to Art. 42 DSGVO together with legally binding and enforceable commitments of the controller or processor in the third country.
standard data protection clauses adopted by the Commission pursuant to the examination procedure under Art. 93(2) DSGVO.

Currently, there is no data transfer to countries outside the EU and the European Economic Area ("third countries") in connection with pre-contractual measures or the conclusion and performance of a consulting agreement. Data processed on our systems is located exclusively on servers in Germany.

4. Recipients of data and data sources

4.1 Categories of recipients of data

To process personal data for the purposes named here, we use the following categories of recipients as processors within the meaning of Art. 28 DSGVO:

Hosting and operation of the online video conferencing system
Hosting of servers for providing web-based services
Operation of e-mail servers
Telecommunications service providers for operating our telephone system

Further recipients that are not processors:

Lawyers for the defense and enforcement of claims
Tax advisors for financial accounting and preparation of financial statements
Debt collection service providers and competent courts, in order to collect receivables and legally enforce claims. If, in the event of a debt collection case, personal data (customer and contact data, payment data and receivables data) is transferred to a debt collection service provider, we will inform you beforehand of the intended transfer.

Beyond this, we only pass on your personal data to third parties if you have expressly consented beforehand. You have the right to revoke consent given at any time with effect for the future.

Your data will also be disclosed if we are legally obliged to do so.

4.2 Data sources

We process personal data that we have received from prospects and customers in the course of our business relationships.

Insofar as necessary for providing our service, we process personal data that we lawfully obtain from publicly accessible sources (debtor registers, land registers, commercial and association registers, press, internet) or that is lawfully transmitted to us by other third parties (a credit agency or an address service provider).

6. Storage period and criteria for determining the period

Personal data is generally only stored for as long as is necessary to fulfil the purposes named here, or as provided for by the retention periods stipulated by law.

We delete data from inquiries about our services in accordance with the statutory retention obligations that arise primarily from commercial and tax law (in particular §§ 147 AO and 257 HGB).

We store your data for the term of the existing contract as well as, after termination of the contract with you, for a period up to receipt of the tax assessment for the year in which the contract ended. If the assessment is not final, the data is stored until the tax audit is completed. Beyond this, we store your data for the duration of the settlement of legal disputes and the assertion, exercise or defense of legal claims. Where statutory retention periods apply, we are obliged to store the data until these periods expire. After the statutory retention obligations have expired, which arise primarily from commercial and tax law (in particular §§ 147 AO and 257 HGB), we delete this data.

7. Information on your rights as a data subject

Holzhofer Consulting GmbH, Lochhamer Str. 31, 82152 Munich - Planegg, Germany, is responsible for the processing of your data, unless stated otherwise.

You may at any time request information from us (Art. 15 DSGVO) about the data stored about you and its rectification (Art. 16 DSGVO) in the event of errors. Furthermore, you may request restriction of processing (Art. 18 DSGVO), the portability (Art. 20 DSGVO) of the data you have provided to us in a machine-readable format, or the deletion of your data (Art. 17 DSGVO) – insofar as it is no longer required.

You also have the right at any time to object to the use of your data that is based on public or legitimate interests (Art. 21 DSGVO).

If you wish to exercise your rights as a data subject, please direct your request to:

Holzhofer Consulting GmbH
Lochhamer Straße 31
82152 Munich - Planegg
Germany

8. Right to lodge a complaint with a supervisory authority

In addition, pursuant to Art. 77(1) DSGVO you have the right to lodge a complaint with a supervisory authority. Further information is available from the supervisory authority responsible for your location. For Holzhofer Consulting, this is the

Bavarian State Office for Data Protection Supervision
P.O. Box 1349
91511 Ansbach
Germany
Phone: +49 (0) 981 53 1300
E-Mail: poststelle@lda.bayern.de

These notices pursuant to Art. 13 et seq. DSGVO, § 32 BDSG on data protection serve the duty to inform data subjects when personal data is collected in the course of the application process and the employment relationship.

Name and contact details of the controller

Holzhofer Consulting GmbH
Lochhamer Straße 31
82152 Munich - Planegg
Germany
Tel.: +49 (0) 89 12 50 15 600
E-Mail:

(hereinafter "Holzhofer Consulting GmbH", "we", "us").

1. Purposes for which the personal data are to be processed, and the legal basis for the processing

1.1 Application process

In order to carry out the application process, we, as well as third parties or processors commissioned by us, process the following data about you, insofar as you have provided it to us during the application process or in the course of the contractual relationship:

Position applied for
Professional qualification
Personal details (first name, surname, address, phone, date of birth, place of birth, e-mail address, mobile number)
Nationality
Where applicable, details of driving licence and/or vehicle
Details of desired working hours
Desired starting date
Salary expectations
Further information from your CV, references, certificates

The legal basis for this is Art. 6(1)(b) DSGVO. Insofar as you consent to your application being stored in a talent pool, the purpose of the data processing is to contact you to propose comparable positions. The legal basis for this is Art. 6(1)(a) DSGVO.

To avoid infection with the COVID-19 virus and to comply with legal requirements for infection control, we may conduct interviews via a video conferencing system. Recordings of these conversations are not made. The legal basis for video interviews is Art. 6(1)(f) DSGVO. A balancing of interests was carried out and concluded that the interests of the applicants concerned, among other things due to the technical and organizational measures taken, do not outweigh the controller's interest in avoiding infection with the COVID-19 virus, and that the data subject also has an interest in not becoming infected with the virus.

1.2 Contractual relationship

In the event of a job offer, we process your data to perform the contractual relationship. The legal basis for this is likewise Art. 6(1)(b). In order to perform the employment contract, we, as well as third parties or processors commissioned by us, process the following data about you, insofar as you have not already provided it to us during the application process or in the course of the employment relationship, or the data arises in the course of the employment relationship. These are:

Personal details (first name, surname, address, phone, place of birth, e-mail address, mobile number)
Date of birth, in particular to determine retirement age
Nationality and, where applicable, residence permit to determine your work permit
Details of driving licence, insofar as required for the employment relationship
Tax class, tax identification number
Data from your social insurance card
Health insurance provider
Account number for salary/wage transfer
Marital status, to reconcile tax class
Further information from your CV, references, certificates for assessing your qualifications

In the course of the existing employment relationship, special categories of personal data may also be processed. Such data is processed on the basis of Art. 9(2)(a) or (b) DSGVO.

Questions regarding severe disability are handled on the legal basis of Book Nine of the German Social Code (SGB IX), for example for workplace design or the calculation of additional leave.

A number of your data (e.g. e-mail address) is processed for the administration and security of the IT system. This includes created and archived text documents (e.g. correspondence). This also includes data collected in the course of internet usage. Without this data processing, secure operation of the system, and thus employment at our company, is not possible.

3. Categories of data recipients

To the extent permitted by law, we disclose personal data to external parties:

Social insurance providers (including company health insurance funds)
Tax office
Company health insurance funds
Occupational physicians
Lawyers in the case of employment law advice
Courts
Banks involved in payment
Trade union named by the employee, with the consent of the data subject
Pension funds
Insurance companies in the context of an existing group or individual insurance policy

4. Data transfer to third countries

A transfer of personal data to countries outside the European Union or the EEA takes place on the basis of:

an adequacy decision of the European Commission within the meaning of Art. 45 DSGVO.
an approved certification mechanism pursuant to Art. 42 DSGVO together with legally binding and enforceable commitments of the controller or processor in the third country.
standard data protection clauses adopted by the Commission pursuant to the examination procedure under Art. 93(2) DSGVO.

5. Obligation to provide data

If you apply for a job vacancy or give your consent to be included in our talent pool, you must provide the data named under item 2. Failure to provide this data would mean that the application process cannot be carried out, or that inclusion in a talent pool is not possible.

Scoring

Your personal data is not processed for the purpose of carrying out automated decision-making in individual cases, including profiling, pursuant to Art. 22(1) and (4) DSGVO.

6. Data sources

We process personal data that we have received from you in the course of the application process or the conclusion of a service, employment or works contract.

7. Storage period and criteria for determining the period

Personal data is only stored for as long as is necessary to fulfil the purposes named here, or as provided for by the retention periods stipulated by law. Once the respective purpose no longer applies, or after the retention periods have expired, the data is deleted in accordance with statutory provisions. In addition, personal data may also be stored for the duration of the assertion, exercise or defense of legal claims. Documents of rejected applicants are retained for up to six months after completion of the application process on the basis of the General Equal Treatment Act (AGG) and the Code of Civil Procedure (ZPO).

In the event of consent to participate in the talent pool, personal data is stored for the duration of the consent within the legally permissible framework, unless a revocation is received beforehand.

8. Your rights as a data subject

You have the option to exercise your "rights as a data subject" at any time:

Right to information pursuant to Art. 15 DSGVO.
Right to rectification pursuant to Art. 16 DSGVO.
Right to erasure pursuant to Art. 17 DSGVO.
Right to restriction of processing pursuant to Art. 18 DSGVO.
Right to data portability pursuant to Art. 20 DSGVO.
Right to object pursuant to Art. 21 DSGVO.

If you wish to exercise your rights, please direct your request by e-mail to office@holzhofer-consulting.de or by mail to the address given above.

9. Right to lodge a complaint with a supervisory authority

In addition, pursuant to Art. 77(1) DSGVO you have the right to lodge a complaint with a supervisory authority. Further information is available from the supervisory authority responsible for your location. For Holzhofer Consulting, this is the

Bavarian State Office for Data Protection Supervision
P.O. Box 1349
91511 Ansbach
Germany
Phone: +49 (0) 981 53 1300
E-Mail: poststelle@lda.bayern.de

Privacy for Website Users

Privacy for Customers and Prospects

Privacy for Applicants